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What is Claimed is ; 

1 . A Montgomery exponentiator that modulo exponentiates a generator to 
a power of an exponent, the Montgomery exponentiator comprising: 

a first multiplier that is configured to repeatedly square a residue of the 
generator to produce a series of first multiplier output values at a first multiplier 
5 output; and 

a second multiplier that is configured to multiply selected ones of the series of 
first multiplier output values that correspond to a bit of the exponent that is a 
predetermined binary value, by a partial result, to produce a series of second 
multiplier output values at a second multiplier output. 

10 

2. A Montgomery exponentiator according to Claim 1 further comprising: 
a first register that is coupled to the second multiplier output, and is configured 

to serially store the series of second multiplier output values to thereby provide the 
partial result; and 

15 a second register that is coupled to the first multiplier output, and is 

configured to serially store the series of first multiplier output values and to serially 
provide the series of first multiplier values to the first and second multipliers. 

3 . A Montgomery exponentiator according to Claim 2 wherein the first 
20 register is fiirther configured to be initialized to the first binary value and wherein the 

second register is further configured to be initialized to the residue of the generator. 

4. A Montgomery exponentiator according to Claim 1 wherein each of 
the first and second multipliers comprises a Montgomery multiplier that modulo 

25 multiplies a residue multiplicand by a residue multiplier to obtain a residue product, 
each Montgomery multiplier comprising: 

a scalar multiplier that is configured to multiply a least significant digit of the 
multiplicand by a first selected digit of the multiplier to produce a scalar multiplier 
output; 

30 a first vector multiplier that is configured to multiply the scalar multiplier 

output by a modulus to produce a first vector multiplier output; 

a second vector multiplier that is configured to multiply a second selected digit 
of the multiplier by the multiplicand to produce a second vector multiplier output; and 
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an accumulator that is configured to add the first vector muhiplier output and 
the second vector multiplier output to produce a product output. 

5. A Montgomery exponentiator according to Claim 4 wherein the scalar 
5 multiplier is further configured to multiply the least significant digit of the 

multiplicand by the first selected digit of the multiplier and by one over a negative of 
a least significant digit of the modulus to produce the scalar multiplier output. 

6. A Montgomery exponentiator according to Claim 5 further comprising 
1 0 a first multiplexer that is configured to multiplex the least significant digit of the 

multiplicand and one over the negative of the least significant digit of the modulus 
into the scalar multiplier. 

7. A Montgomery exponentiator according to Claim 4 further comprising 
1 5 a first feedback path that is configured to feed the scalar multiplier output back into 

the scalar multiplier. 

8. A Montgomery exponentiator according to Claim 4 further comprising 
a second feedback path that is configured to feed the product output back into the 

20 scalar multiplier. 

9. A Montgomery exponentiator according to Claim 7 further comprising 
a second feedback path that is configured to feed the product output back into the 
scalar multiplier. 

25 

10. A Montgomery exponentiator according to Claim 4 wherein the first 
selected digit of the multiplier is different from the second selected digit of the 
multiplier. 

30 11. A Montgomery exponentiator that modulo exponentiates a generator to 

a power of an exponent, the Montgomery exponentiator comprising: 

a first muhiplier that is configured to be responsive to a residue of the 
generator and that includes a first multiplier output; and 
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a second multiplier that is configured to be responsive to the first multiplier 
output and that includes a second multiplier output. 

12. A Montgomery exponentiator according to Claim 1 1 further 
5 comprising: 

a first register that is coupled to the second multiplier output, the second 
multiplier further being responsive to the first register; and 

a second register that is coupled to the first multiplier output, the first 
multiplier further being responsive to the second register and the second multiplier 
1 0 being responsive to the first multiplier output via the second register. 

13. A Montgomery exponentiator according to Claim 12 further 
comprising: 

a controller that is config^l^ed to cause the first multiplier to sqixare contents of 
1 5 the second register and to cause the second multiplier to multiply the contents of the 
second register by contents of the first register if a selected bit of the exponent is a 
predetermined binary value and to refrain from multiplying the contents of the second 
register by the contents of the first register if the selected bit of the exponent is not the 
predetermined binary value. 

20 

14. A Montgomery exponentiator according to Claim 13 wherein the first 
register is configured to be initialized to the first binary value and wherein the second 
register is configured to be initialized to the residue of the generator. 



25 15. A Montgomery exponentiator according to Claim 1 1 wherein each of 

the first and second multipliers comprises a Montgomery multiplier that modulo 
multiplies a residue multiplicand by a residue multiplier to obtain a residue product, 
each Montgomery multiplier comprising: 
a scalar multiplier; 
30 a first vector multiplier; 

a second vector multiplier; and 

wherein the controller is configured to control the scalar multiplier, the first 
vector multiplier and the second vector multiplier to overlap scalar multiplies using a 
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selected digit of the multiplier and vector multiplies using a modulus and the 
multiplicand. 

16. A Montgomery exponentiator according to Claim 1 5 wherein the 
5 controller is further configured to control the scalar multiplier to perform a scalar 

multiply using a least significant digit of the multiplier prior to controlling the vector 
multipliers to perform the vector multiplies using the modulus and the multiplicand. 

17. A Montgomery exponentiator according to Claim 15 wherein the 
1 0 controller is further configured to control the scalar multiplier to multiply a least 

significant digit of the multiplicand by a first selected digit of the multiplier to 
produce a scalar multiplier output, to control the first vector multiplier to multiply the 
scalar multiplier output by the modulus to produce a first vector multiplier output and 
to control the second vector multiplier to multiply a second selected digit of the 
1 5 multiplier by the multiplicand to produce a second vector multiplier output. 

18. A Montgomery exponentiator according to Claim 17 the controller is 
further configured to control the scalar multiplier to multiply the least significant digit 
of the multiplicand by the first selected digit of the multiplier by and one over a 

20 negative of a least significant digit of a modulus to produce the scalar multiplier 
output. 

19. A Montgomery exponentiator according to Claim 1 8 wherein the 
controller is flirther configured to multiplex the least significant digit of the 

25 multiplicand and one over the negative of the least significant digit of the modulus 
into the scalar multiplier. 

20. A Montgomery exponentiation method that modulo exponentiates a 
generator to a power of an exponent, the Montgomery exponentiation method 

30 comprising: 

repeatedly squaring a residue of the generator in a first multiplier, to produce a 
series of first multiplier output values; and 
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multiplying selected ones of the series of first multiplier output values that 
correspond to a bit of the exponent that is a predetermined binary value, by a partial 
result in a second multiplier, to produce a series of second multiplier output values. 

5 21 . A method according to Claim 20 further comprising: 

serially storing the series of second multiplier output values to thereby provide 

the partial result; and 

serially storing the series of first multiplier output values and providing the 

serially stored series of fiirst multiplier values to the first and second multipliers. 

10 

22. A method according to Claim 20 wherein each of the first and second 
multipliers performs a Montgomery multiplication method that modulo multiplies a 
residue multiplicand by a residue multiplier to obtain a residue product, each 
Montgomery multiplication method comprising: 

1 5 multiplying a least significant digit of the multiplicand by a first selected digit 

of the multiplier in a scalar multiplier to produce a scalar multiplier output; 

multiplying the scalar multiplier output by a modulus in a first vector 
multiplier to produce a first vector multiplier output; 

multiplying a second selected digit of the multiplier by the multiplicand in a 
20 second vector multiplier to produce a second vector multiplier output; and 

adding the first vector multiplier output and the second vector multiplier 
output to produce a product output. 

23 . A method according to Claim 22 fiirther comprising multiplying the 
25 least significant digit of the multiplicand by the first selected digit of the multiplier 

and by one over a negative of a least significant digit of the modulus in the scalar 
multiplier to produce the scalar multiplier output. 

24. A method according to Claim 23 fiirther comprising multiplexing the 
30 least significant digit of the multiplicand and one over the negative of the least 

significant digit of the modulus into the scalar multiplier. 

25. A method according to Claim 22 fiirther comprising feeding the scalar 
multiplier output back into the scalar multiplier. 
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26. A method according to Claim 22 further comprising feeding the 
product output back into the scalar multiplier. 

5 27. A method according to Claim 25 further comprising feeding the 

product output back into the scalar multiplier. 

28. A Montgomery exponentiation method that modulo exponentiates a 
generator to a power of an exponent using a first multiplier that is configured to be 

1 0 responsive to a residue of the generator and that includes a first multiplier output, a 
second multiplier that is configured to be responsive to the first multiplier output and 
that includes a second multiplier output, a first register that is coupled to the second 
multiplier output, the second multiplier further being responsive to the first register, 
and a second register that is coupled to the first multiplier output, the first multiplier 

1 5 further being responsive to the second register and the second multiplier being 
responsive to the first multiplier output via the second register, the Montgomery 
exponentiation method comprising: 

controlling the first multiplier to square contents of the second register; 
controlling the second multiplier to multiply the contents of the second 

20 register by contents of the first register if a selected bit of the exponent is a 

predetermined binary value and to refrain from multiplying the contents of the second 
register by the contents of the first register if the selected bit of the exponent is not the 
predetermined binary value. 

25 29. A method according to Claim 28 further comprising: 

initializing the first register to the first binary value; and 
initializing the second register to the residue of the generator. 

30. A method according to Claim 28 wherein each of the first and second 
30 multipliers performs a Montgomery multiplication method that modulo multiplies a 
residue multiplicand by a residue multiplier to obtain a residue product, each 
Montgomery multiplication method usmg a scalar multiplier, a first vector multiplier, 
and a second vector multiplier, the Montgomery multiplication method comprising: 
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controlling the scalar multiplier, the first vector multiplier and the second 
vector multiplier to overlap scalar multiplies using a selected digit of the multiplier 
and vector multiplies using a modulus and the multiplicand. 

5 3 1 . A method according to Claim 30 further comprising controlling the 

scalar multiplier to perform a scalar multiply using a least significant digit of the 
multiplier prior to controlling the vector multipliers to perform the vector multiplies 
using the modulus and the multiplicand. 

10 32. A method according to Claim 30 wherein the controlling comprises: 

controlling the scalar multiplier to multiply a least significant digit of the 
multiplicand by a first selected digit of the multiplier to produce a scalar multiplier 
output; 

controlling the first vector multiplier to multiply the scalar multiplier output 
15 by the modulus to produce a first vector multiplier output; and 

controlling the second vector multiplier to multiply a second selected digit of 
the multiplier by the multiplicand to produce a second vector multiplier output. 

33. A method according to Claim 32 further comprising controlling the 
20 scalar multiplier to multiply the least significant digit of the multiplicand by the first 

selected digit of the multiplier and by one over a negative of a least significant digit of 
a modulus to produce the scalar multiplier output. 

34. A method according to Claim 33 further comprising multiplexing the 
25 least significant digit of the multiplicand and one over the negative of the least 

significant digit of the modulus into the scalar multiplier. 

35. A public key engine that calculates functions of large numbers modulo 
another large number, the public key engine comprising: 

30 a Montgomery exponentiator that modulo exponentiates a generator to a 

power of an exponent, the Montgomery exponentiator comprising: 

a first multiplier that is configured to be responsive to a residue of the 
generator and that includes a first multiplier output; and 
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a second multiplier that is configured to be responsive to the first 
multiplier output and that includes a second multiplier output. 

36. A public key engine according to Claim 35 wherein the Montgomery 
exponentiator further comprises: 

a first register that is coupled to the second multiplier output, the second 
multiplier further being responsive to the first register; and 

a second register that is coupled to the first multiplier output, the first 
multiplier further being responsive to the second register, and the second multiplier 
being responsive to the first multiplier output via the second register. 

37. A public key engine according to Claim 36 wherein the Montgomery 
exponentiator further comprises: 

a controller that is configured to cause the first multiplier to square contents of 
the second register and to cause the second multiplier to multiply the contents of the 
second register by contents of the first register if a selected bit of the exponent is a 
predetermined binary value and to refrain from multiplying the contents of the second 
register by the contents of the first register if the selected bit of the exponent is not the 
predetermined binary value. 

38. A public key engine according to Claim 37 wherein the first register is 
configured to be initialized to the first binary value and wherein the second register is 
configured to be initialized to the residue of the generator. 

39. A public key engine according to Claim 35 wherein each of the first 
and second multipliers comprises a Montgomery multiplier that modulo multiplies a 
residue multiplicand by a residue multiplier to obtain a residue product, each 
Montgomery multiplier comprising: 

a scalar multiplier; 

a first vector multiplier; 

a second vector multiplier; and 

wherein the controller is configured to control the scalar multiplier, the first 
vector multiplier and the second vector multiplier to overlap scalar multiplies using a 
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selected digit of the multiplier and vector multiplies using a modulus and the 
multiplicand. 

40. A public key engine according to Claim 39 wherein the controller is 

5 further configured to control the scalar multiplier to perform a scalar multiply using a 
least significant digit of the multiplier prior to controlling the vector multipliers to 
perform the vector multiplies using the modulus and the miiltiplicand. 

41 . A public key engine according to Claim 39 wherein the controller is 
10 further configured to control the scalar multiplier to multiply a least significant digit 

of the multiplicand by a first selected digit of the multiplier to produce a scalar 
multiplier output, to control the first vector multiplier to multiply the scalar multiplier 
output by the modulus to produce a first vector multiplier output and to control the 
second vector multiplier to multiply a second selected digit of the multiplier by the 
1 5 multiplicand to produce a second vector multiplier output. 

42. A public key engine according to Claim 41 the controller is further 
configured to control the scalar multiplier to multiply the least significant digit of the 
multiplicand by the first selected digit of the multiplier by and one over a negative of 

20 a least significant digit of a modulus to produce the scalar multiplier output. 

43 . A public key engine according to Claim 42 wherein the controller is 
further configured to multiplex the least significant digit of the multiplicand and one 
over the negative of the least significant digit of the modulus into the scalar 

25 multiplier. 

44. A public key engine according to Claim 35 further comprising a 
modulo function generator. 

30 45. A public key engine according to Claim 35 further comprising a 

Chinese Remainder Theorem computer that is configured to use the first multiplier 
and the second multiplier. 
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